5104 matches found
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0133
An update of 'linux-esx', 'linux' packages of Photon OS has been released...
php: Incorrect return value check of OpenSSL sealing function leads to crash
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0132
An update of 'linux-esx', 'rsync', 'linux' packages of Photon OS has been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0132-A
An update of 'linux', 'linux-esx' packages of Photon OS has been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0041
An update of 'ceph', 'linux-esx', 'rsync', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS has been released...
OpenDaylight Helium Information Disclosure Vulnerability
Opendaylight, a project of the Linux Foundation, is a community-driven, open-source, software-defined networking framework that includes a collection of modules to perform networking tasks that need to be done quickly.OpenDaylight Helium is a version of it. A security vulnerability exists in the...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0130
An update of 'mysql', 'openjdk',openjre packages of Photon OS has been released...
[SECURITY] Fedora 28 Update: composer-1.6.4-1.fc28
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0125
An update of 'python2' packages of Photon OS has been released...
PT-2018-3713 · Python +2 · Python +2
Name of the Vulnerable Software and Affected Versions: Python versions prior to 2016 Description: The issue is related to incorrect calculations in the library/glob.html package of Python. It may allow a remote attacker to impact the integrity of protected information. The documentation of...
(RHSA-2018:1072) Low: Kubernetes in the Extras channel - deprecation notice
The kubernetes packages provide utilities for container cluster management. Kubernetes and its dependencies will no longer be updated through the Extras channel. Instead, the Red Hat customers are advised to use Red Hat's supported Kubernetes-based products such as Red Hat OpenShift Container...
[SECURITY] Fedora 27 Update: python3-docs-3.6.5-1.fc27
The python3-docs package contains documentation on the Python 3 programming language and interpreter. Install the python3-docs package if you'd like to use the documentation for the Python 3 language...
[SECURITY] Fedora 26 Update: python3-docs-3.6.5-1.fc26
The python3-docs package contains documentation on the Python 3 programming language and interpreter. Install the python3-docs package if you'd like to use the documentation for the Python 3 language...
Cross site scripting
A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseActiondoDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these...
CVE-2018-1000144
A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseActiondoDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these...
CVE-2018-1000144
A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseActiondoDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these...
CVE-2018-1000144
CVE-2018-1000144 affects Jenkins in the Cucumber Living Documentation Plugin (versions 1.0.12 and older). The root cause is in CukedoctorBaseAction#doDynamic, which disables the Content-Security-Policy for archived artifacts and workspace files, allowing an attacker who can control those files to...
UPDATE: Prowler 2.0 Beta
PenTestIT RSS Feed My older post about Prowler was about a good NINE months ago. Since then, a lot has changed and hence, this post is about the recently released update made to the AWS CIS Benchmark tool – Prowler 2.0 Beta! This new beta version has lots of improvements which you shall read abou...
CVE-2018-1000144: Improper Neutralization of Input During Web Page Generation
A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseActiondoDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these...